Vulnerabilities CVE-2026-13402

CVE-2026-13402

None

Open

TLP:CLEAR

Royal Elementor Addons < 1.7.1063 - Unauthenticated Private Mega Menu Template Disclosure

NVD CVE.org

Critical Infrastructure

AI Analysis

No AI analysis yet.

Description

The Royal Addons for Elementor WordPress plugin before 1.7.1063 does not check the post status of menu items or the templates they reference in one of its REST endpoints, allowing unauthenticated users to retrieve the rendered HTML content of private or draft Elementor templates linked from non-public navigation menu items.

Details

EPSS Score ⓘ: 0.22%

13.4th percentile
Confidence: 90%
Published: Jul 17, 2026
Last Modified: Jul 17, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.